Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33392e302f32342d3234203d3e20323639343431.roa
File:                     34352e3138352e33392e302f32342d3234203d3e20323639343431.roa (raw, json)
Hash identifier:          pKgN1pLfa46CBLUz6gXYC/nh/cyeU662oLH5AOuffGE=
Subject key identifier:   A5:5F:F1:AB:63:CE:4D:5C:6B:E7:A4:BA:B5:90:7F:21:EE:FC:6A:CD
Certificate issuer:       /CN=00FFFF94E89C12D2D266ECF9ACD62277C894680B
Certificate serial:       16AF8543C1B3278505425365D4661544F2411D8A
Authority key identifier: 00:FF:FF:94:E8:9C:12:D2:D2:66:EC:F9:AC:D6:22:77:C8:94:68:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33392e302f32342d3234203d3e20323639343431.roa
Signing time:             Fri 01 Mar 2024 23:33:58 +0000
ROA not before:           Fri 01 Mar 2024 23:28:58 +0000
ROA not after:            Fri 28 Feb 2025 23:33:58 +0000
asID:                     269441
IP address blocks:        45.185.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:af:85:43:c1:b3:27:85:05:42:53:65:d4:66:15:44:f2:41:1d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FFFF94E89C12D2D266ECF9ACD62277C894680B
        Validity
            Not Before: Mar  1 23:28:58 2024 GMT
            Not After : Feb 28 23:33:58 2025 GMT
        Subject: CN=A55FF1AB63CE4D5C6BE7A4BAB5907F21EEFC6ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:46:55:30:18:0d:90:d6:3d:c5:7a:cc:b0:
                    bb:b9:75:e9:57:c3:08:37:48:50:15:43:9a:51:4e:
                    ab:04:74:0a:c2:dd:43:62:a8:54:a2:91:4a:9f:b4:
                    52:5c:18:2a:0b:0f:14:b3:0b:c1:09:21:07:da:a5:
                    b2:2c:d8:2c:61:d4:48:00:52:fb:4e:5a:a7:98:16:
                    82:64:6a:d1:67:82:04:b9:61:2d:c3:22:00:47:68:
                    35:a8:8a:7e:cd:31:7e:63:a4:65:73:a0:ba:5c:a3:
                    7c:6d:b1:9e:a3:cf:87:42:00:1e:1f:f8:47:2a:8d:
                    bb:3a:02:0e:a5:45:97:90:3a:1d:13:c2:f5:11:e7:
                    9f:b2:bc:22:3b:ac:95:83:42:f7:9c:8a:f7:4a:be:
                    e9:c0:07:4b:ec:98:84:f2:63:b9:20:62:8b:32:06:
                    47:57:90:d2:fd:19:bb:a1:e5:58:72:f6:dc:1f:be:
                    c8:11:9b:ab:48:f3:2c:6a:fc:ad:7d:84:21:be:34:
                    89:2f:67:9a:30:53:10:bf:d7:7b:2a:46:ad:be:46:
                    4b:a0:28:f9:8a:bb:18:92:7e:7b:44:d4:d5:10:ff:
                    8d:4c:f3:0c:3f:62:e2:bc:ab:e2:6a:3b:d1:e6:4f:
                    c5:98:a9:e4:6e:59:d0:38:fe:b5:20:88:8c:ac:cc:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5F:F1:AB:63:CE:4D:5C:6B:E7:A4:BA:B5:90:7F:21:EE:FC:6A:CD
            X509v3 Authority Key Identifier:
                keyid:00:FF:FF:94:E8:9C:12:D2:D2:66:EC:F9:AC:D6:22:77:C8:94:68:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33392e302f32342d3234203d3e20323639343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:d0:15:ea:73:ef:33:01:f1:b9:17:17:dc:d7:2e:58:23:f2:
         d5:65:15:aa:9d:20:22:af:4e:f0:9b:e7:17:10:ff:45:5d:1a:
         b8:65:1f:12:f2:ee:b6:65:c5:1e:53:27:ed:ee:5b:f5:67:cf:
         f5:42:97:1b:4e:96:5e:c7:ec:e5:3e:9a:ab:fb:b7:52:b8:2a:
         0e:d6:56:a1:ae:f4:6a:40:12:07:c5:62:f6:47:15:03:3d:17:
         85:6f:f3:24:4a:d2:12:ef:17:c0:8c:e4:8d:fc:ca:4c:01:46:
         f4:5e:67:15:1b:97:17:cd:c9:06:e5:e3:85:b4:4c:e1:3a:54:
         68:30:b1:ee:d2:6c:00:80:5a:df:28:93:d6:e0:9b:c1:8d:50:
         8b:17:cd:2b:b2:8d:f5:ab:e6:b6:ad:82:09:04:20:01:98:cd:
         ff:17:c7:01:b8:da:81:ad:13:d1:cc:8a:ab:ad:02:84:c4:58:
         43:b6:97:ae:86:3e:93:10:d8:8a:a5:a6:12:38:58:9d:2f:4c:
         cf:d7:90:11:c4:22:64:d8:74:f0:ef:a0:55:1f:8a:99:ec:3c:
         d7:c8:ff:23:77:0a:02:a9:ff:73:d7:9f:76:95:02:84:b2:3b:
         6d:5e:2e:b9:12:1f:e3:f3:49:52:46:e9:cf:c6:9e:db:71:fa:
         36:1e:db:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org